'350,000 vulnerable servers' scan counts are nearly useless
Quote
Many people block those scanners IP addresses. And also there's tons of honeypots out there that fake being those things just to attract the traffic so they can analyze the exploits.
Episode 210: Mothership Node (episode page, opens in a new tab) 00:06:46 (play audio from this timestamp, opens in a new tab)
Voice-matched
Summary
Security headlines often cite scans showing hundreds of thousands of exposed vulnerable servers. Dave notes that many admins block scanners like Shodan, and the internet is full of honeypots faking those services to study exploits. That makes the counts about as useful as IAB download metrics.
Also said
Episode 210: Mothership Node (episode page, opens in a new tab) 00:07:00 (play audio from this timestamp, opens in a new tab)
They're about as useful as the IAB download metrics.
Voice-matched